last executing test programs: 16.476906233s ago: executing program 3 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 16.407079475s ago: executing program 1 (id=588): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$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") 16.29383518s ago: executing program 3 (id=590): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f00000000c0)=0x14) 15.879186936s ago: executing program 3 (id=591): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c910"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$tcp_congestion(0xffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x0, 0x0) 15.810104218s ago: executing program 3 (id=592): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000020c0)=ANY=[@ANYBLOB="c021"], 0x18) 15.77182268s ago: executing program 1 (id=593): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(0x0, 0x205, 0x0) 15.594606817s ago: executing program 3 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x78}}, 0x0) 15.409137174s ago: executing program 3 (id=597): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x72, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sync() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) setrlimit(0x6, &(0x7f00000000c0)) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 14.75518163s ago: executing program 1 (id=598): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003ff"], 0x0, 0x0, 0x0}, 0x0) 11.315219472s ago: executing program 1 (id=617): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80003, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11.255851805s ago: executing program 1 (id=618): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xc9) ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x301}, 0x14}}, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x202001) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000000d06010200000000000000000000000015ec6cd6000300686173683a69702c706f72742c6e65740000000005000100070000000500050000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000f, 0x40a2012, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r6, 0xffffffffffffffff, 0xc, 0x0, 0x4000, @prog_id}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x40, 0x9f, 0x8, 0xffff, {{0x28, 0x4, 0x1, 0x7, 0xa0, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x9e, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @rand_addr=0x64010100, @loopback, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @lsrr={0x83, 0x17, 0xda, [@broadcast, @private=0xa010102, @rand_addr=0x64010100, @local, @loopback]}, @timestamp_prespec={0x44, 0x4c, 0x80, 0x3, 0x2, [{@loopback, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010102, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x2a2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x27}, {@private=0xa010101}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}, {@multicast1, 0x1ff}]}]}}}}}) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0x40086602, &(0x7f0000000080)) 10.33773984s ago: executing program 1 (id=625): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x72, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sync() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) setrlimit(0x6, &(0x7f00000000c0)) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) 3.550644633s ago: executing program 0 (id=663): syz_open_dev$sg(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000440)=[@in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x4e22, 0x0, @mcast2}]}, &(0x7f00000004c0)=0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.508857454s ago: executing program 4 (id=664): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) listen(r1, 0x3) listen(r1, 0x0) 2.765857583s ago: executing program 2 (id=666): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.648951798s ago: executing program 2 (id=667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000f64f181200000000000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x90) 2.519042792s ago: executing program 2 (id=668): bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000004950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110350000000000a5000000000000019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x33c}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = io_uring_setup(0x766, &(0x7f0000000040)) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)=""/114, 0x72}], 0x1) close_range(r8, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[@ANYBLOB="18000000"], 0x18}}, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) dup2(r0, r6) 2.518766862s ago: executing program 4 (id=669): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r3 = eventfd2(0x0, 0x0) dup2(r3, r2) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) 2.368063569s ago: executing program 0 (id=670): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, 0x0) 2.243546793s ago: executing program 0 (id=671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.351970578s ago: executing program 0 (id=672): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305}, 0x14}}, 0x0) 1.158883045s ago: executing program 2 (id=673): r0 = io_uring_setup(0x2e35, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) fsopen(0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$xdp(0x2c, 0x3, 0x0) futex(0x0, 0x8, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.155814475s ago: executing program 4 (id=674): prlimit64(0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r1, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 1.135663436s ago: executing program 4 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setresuid(0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @local}, &(0x7f00000002c0)=0xc) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r6}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 249.98508ms ago: executing program 0 (id=676): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x2) 184.136143ms ago: executing program 2 (id=678): socketpair(0x22, 0x3, 0x0, &(0x7f0000001880)) 153.891834ms ago: executing program 4 (id=679): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x0, 0x0) dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)={0x1, 0x0, [{0x0, 0x6, &(0x7f0000000180)=""/6}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r2}) 88.137426ms ago: executing program 0 (id=680): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 22.086899ms ago: executing program 2 (id=681): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) 0s ago: executing program 4 (id=682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 46.883371][ T3493] cgroup: Unknown subsys name 'net' [ 47.025067][ T3493] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.449307][ T3493] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.133988][ T3502] chnl_net:caif_netlink_parms(): no params data found [ 49.272215][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.292292][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.301478][ T3502] device bridge_slave_0 entered promiscuous mode [ 49.312765][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.320037][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.327956][ T3502] device bridge_slave_1 entered promiscuous mode [ 49.363000][ T3503] chnl_net:caif_netlink_parms(): no params data found [ 49.378670][ T3506] chnl_net:caif_netlink_parms(): no params data found [ 49.400081][ T3502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.413669][ T3502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.436428][ T3504] chnl_net:caif_netlink_parms(): no params data found [ 49.486860][ T3502] team0: Port device team_slave_0 added [ 49.509320][ T3505] chnl_net:caif_netlink_parms(): no params data found [ 49.520498][ T3502] team0: Port device team_slave_1 added [ 49.568511][ T3502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.575474][ T3502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.601639][ T3502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.635609][ T3502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.642740][ T3502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.669405][ T3502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.716070][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.723702][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.731995][ T3503] device bridge_slave_0 entered promiscuous mode [ 49.741312][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.749028][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.756918][ T3503] device bridge_slave_1 entered promiscuous mode [ 49.800053][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.807145][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.815536][ T3506] device bridge_slave_0 entered promiscuous mode [ 49.853339][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.860610][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.868492][ T3506] device bridge_slave_1 entered promiscuous mode [ 49.875509][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.882776][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.891072][ T3504] device bridge_slave_0 entered promiscuous mode [ 49.898517][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.905586][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.913946][ T3505] device bridge_slave_0 entered promiscuous mode [ 49.931083][ T3503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.942706][ T3503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.966910][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.974128][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.982696][ T3504] device bridge_slave_1 entered promiscuous mode [ 49.989823][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.996880][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.004936][ T3505] device bridge_slave_1 entered promiscuous mode [ 50.022886][ T3502] device hsr_slave_0 entered promiscuous mode [ 50.030485][ T3502] device hsr_slave_1 entered promiscuous mode [ 50.045102][ T3506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.074271][ T3503] team0: Port device team_slave_0 added [ 50.089875][ T3506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.108530][ T3503] team0: Port device team_slave_1 added [ 50.116011][ T3505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.144550][ T3504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.156276][ T3504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.182779][ T3505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.229010][ T3506] team0: Port device team_slave_0 added [ 50.243697][ T3503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.250841][ T3503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.276759][ T3503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.289595][ T3503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.296549][ T3503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.322760][ T3503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.348988][ T3506] team0: Port device team_slave_1 added [ 50.357622][ T3504] team0: Port device team_slave_0 added [ 50.373257][ T3504] team0: Port device team_slave_1 added [ 50.382009][ T3505] team0: Port device team_slave_0 added [ 50.421975][ T3505] team0: Port device team_slave_1 added [ 50.449288][ T3504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.456263][ T3504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.482279][ T3504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.510932][ T3506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.517899][ T3506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.543932][ T3506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.570353][ T3503] device hsr_slave_0 entered promiscuous mode [ 50.577157][ T3503] device hsr_slave_1 entered promiscuous mode [ 50.587126][ T3503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.596812][ T3503] Cannot create hsr debugfs directory [ 50.606212][ T3504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.613193][ T3504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.639156][ T3504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.650726][ T3505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.657764][ T3505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.684152][ T3505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.696451][ T3506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.703502][ T3506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.729495][ T3506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.752466][ T3505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.759952][ T3505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.786508][ T3505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.888299][ T3504] device hsr_slave_0 entered promiscuous mode [ 50.895296][ T3504] device hsr_slave_1 entered promiscuous mode [ 50.902303][ T3504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.910126][ T3504] Cannot create hsr debugfs directory [ 50.928606][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 50.935505][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 50.942328][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 50.948520][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 50.954603][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 50.964151][ T3505] device hsr_slave_0 entered promiscuous mode [ 50.971047][ T3505] device hsr_slave_1 entered promiscuous mode [ 50.977669][ T3505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.985934][ T3505] Cannot create hsr debugfs directory [ 50.994600][ T3506] device hsr_slave_0 entered promiscuous mode [ 51.001476][ T3506] device hsr_slave_1 entered promiscuous mode [ 51.008074][ T3506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.015759][ T3506] Cannot create hsr debugfs directory [ 51.253139][ T3502] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.264211][ T3502] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.282683][ T3502] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.297336][ T3502] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.351772][ T3503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.362519][ T3503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.384081][ T3503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.406216][ T3503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.432665][ T3504] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.444227][ T3504] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.454876][ T3504] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.483745][ T3504] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.553492][ T3506] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.572674][ T3506] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.585345][ T3506] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.595614][ T3506] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.619608][ T3502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.651916][ T3505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.662215][ T3505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.689489][ T3502] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.698077][ T3505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.708195][ T3505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.718613][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.727668][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.768628][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.778337][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.787853][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.795149][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.804851][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.814505][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.823082][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.830188][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.874790][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.885412][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.894945][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.903787][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.912724][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.929976][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.937982][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.947808][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.956810][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.965288][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.982551][ T3502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.995536][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.029181][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.037570][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.064491][ T3503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.091309][ T3504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.116227][ T3505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.132573][ T3506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.141514][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.151349][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.162325][ T3504] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.191287][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.201043][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.210492][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.217561][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.226914][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.234896][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.246442][ T3503] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.254762][ T3505] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.279222][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.287112][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.295726][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.303699][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.312294][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.320819][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.327866][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.336162][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.344807][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.353312][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.360439][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.368297][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.377123][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.385884][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.393077][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.400785][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.414273][ T3506] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.423120][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.431246][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.439352][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.462637][ T3502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.485616][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.495025][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.503727][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.510835][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.519365][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.528214][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.535789][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.543415][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.552330][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.561241][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.570190][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.578682][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.587440][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.596657][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.605312][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.612379][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.620427][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.629383][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.637909][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.646444][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.653504][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.661571][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.670862][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.679384][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.686432][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.695012][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.703187][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.711214][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.726057][ T3503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.737195][ T3503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.785027][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.803332][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.813033][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.822103][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.830803][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.840296][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.849215][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.857841][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.866642][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.876061][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.883897][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.912242][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.923075][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.937032][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.946451][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.962277][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.971131][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.980717][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.989815][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.998810][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.010480][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.019018][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.028116][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.036713][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.044697][ T3552] Bluetooth: hci0: command 0x041b tx timeout [ 53.050868][ T3552] Bluetooth: hci1: command 0x041b tx timeout [ 53.057620][ T3504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.057643][ T3552] Bluetooth: hci3: command 0x041b tx timeout [ 53.069487][ T3504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.090593][ T3552] Bluetooth: hci2: command 0x041b tx timeout [ 53.092650][ T3506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.096832][ T3552] Bluetooth: hci4: command 0x041b tx timeout [ 53.117550][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.128880][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.137671][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.146708][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.155321][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.164411][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.173023][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.181709][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.190394][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.198813][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.207390][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.216701][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.256780][ T3503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.266618][ T3505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.277467][ T3505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.291881][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.306598][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.316943][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.329256][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.337464][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.345297][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.352925][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.378792][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.387072][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.424039][ T3502] device veth0_vlan entered promiscuous mode [ 53.438073][ T3502] device veth1_vlan entered promiscuous mode [ 53.486899][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.496187][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.504357][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.552498][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.574694][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.588869][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.601655][ T3506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.644611][ T3502] device veth0_macvtap entered promiscuous mode [ 53.657956][ T3502] device veth1_macvtap entered promiscuous mode [ 53.673999][ T3503] device veth0_vlan entered promiscuous mode [ 53.685090][ T3505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.695762][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.713241][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.725661][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.736141][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.746119][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.756405][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.767209][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.776735][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.787058][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.797554][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.805927][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.814010][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.828658][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.836099][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.854050][ T3503] device veth1_vlan entered promiscuous mode [ 53.876040][ T3504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.891484][ T3502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.910420][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.919278][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.928114][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.937163][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.946302][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.975552][ T3502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.987970][ T3506] device veth0_vlan entered promiscuous mode [ 54.006125][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.014491][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.024524][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.033759][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.042617][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.057000][ T3502] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.069159][ T3502] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.077991][ T3502] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.086946][ T3502] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.114052][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.122038][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.130303][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.140137][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.156163][ T3506] device veth1_vlan entered promiscuous mode [ 54.174190][ T3503] device veth0_macvtap entered promiscuous mode [ 54.184824][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.193703][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.203060][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.239928][ T3503] device veth1_macvtap entered promiscuous mode [ 54.262233][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.271332][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.280911][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.289846][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.298008][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.306428][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.315309][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.349797][ T3504] device veth0_vlan entered promiscuous mode [ 54.360246][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.368083][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.379310][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.387807][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.397386][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.406187][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.417071][ T3506] device veth0_macvtap entered promiscuous mode [ 54.428172][ T3506] device veth1_macvtap entered promiscuous mode [ 54.446197][ T3505] device veth0_vlan entered promiscuous mode [ 54.462810][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.471746][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.479956][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.487725][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.502045][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.513358][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.525770][ T3503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.550811][ T3504] device veth1_vlan entered promiscuous mode [ 54.558895][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.567478][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.584095][ T3505] device veth1_vlan entered promiscuous mode [ 54.594815][ T3506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.605687][ T3506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.616100][ T3506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.627150][ T3506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.638348][ T3506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.648084][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.657062][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.670310][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.686674][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.699542][ T3503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.707283][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.716453][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.724897][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.733973][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.743112][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.752278][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.763436][ T3506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.774357][ T3506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.785181][ T3506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.796532][ T3506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.807789][ T3506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.822231][ T3503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.834240][ T3503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.844212][ T3503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.853031][ T3503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.866296][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.874721][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.884041][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.902487][ T3506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.912373][ T3506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.921995][ T3506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.931076][ T3506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.966666][ T2613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.979663][ T2613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.997517][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.006630][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.015760][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.035663][ T3504] device veth0_macvtap entered promiscuous mode [ 55.045422][ T3505] device veth0_macvtap entered promiscuous mode [ 55.062077][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.071636][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.081021][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.092833][ T3505] device veth1_macvtap entered promiscuous mode [ 55.100956][ T1279] Bluetooth: hci1: command 0x040f tx timeout [ 55.107693][ T1279] Bluetooth: hci0: command 0x040f tx timeout [ 55.119062][ T3504] device veth1_macvtap entered promiscuous mode [ 55.144058][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.153700][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.162503][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.176753][ T3553] Bluetooth: hci4: command 0x040f tx timeout [ 55.185892][ T3553] Bluetooth: hci2: command 0x040f tx timeout [ 55.194847][ T3553] Bluetooth: hci3: command 0x040f tx timeout [ 55.209486][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.221072][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.234896][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.245683][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.255859][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.266657][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.279279][ T3505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.296192][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.337035][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.347614][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.359722][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.370670][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.387866][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.398859][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.409491][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.421801][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.440994][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.451250][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.462283][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.471706][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.481996][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.493249][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.511333][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.522223][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.532383][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.543720][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.556167][ T3505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.579995][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.599013][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.609415][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.626333][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.637667][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.650111][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.660209][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.670946][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.681203][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.692184][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.703256][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.715357][ T3505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.725590][ T3505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.735784][ T3505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.745352][ T3505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.775673][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.785887][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.797917][ T3504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.807413][ T3504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.816301][ T3504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.825937][ T3504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.848794][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.856903][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.902247][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.912467][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.931851][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.971584][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.011342][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.049697][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.071485][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.083878][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.105247][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.113698][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.180256][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.188207][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.240833][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.317691][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.348885][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.351770][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.362833][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.377570][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.415304][ T3608] netlink: 463 bytes leftover after parsing attributes in process `syz.3.12'. [ 56.415487][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.514665][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.563672][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.612327][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.159971][ T3552] Bluetooth: hci0: command 0x0419 tx timeout [ 57.167655][ T3552] Bluetooth: hci1: command 0x0419 tx timeout [ 57.241723][ T3552] Bluetooth: hci3: command 0x0419 tx timeout [ 57.281993][ T3552] Bluetooth: hci2: command 0x0419 tx timeout [ 57.292243][ T3552] Bluetooth: hci4: command 0x0419 tx timeout [ 57.505253][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.513778][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.582206][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.589359][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.597323][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.604530][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.684855][ T3651] device bridge0 entered promiscuous mode [ 57.715631][ T3517] block nbd4: Receive control failed (result -32) [ 57.715982][ T3626] block nbd4: shutting down sockets [ 57.794594][ T3612] loop3: detected capacity change from 0 to 40427 [ 57.879658][ T3612] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 57.931931][ T3612] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 58.042894][ T3612] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.118155][ T3666] device wg2 entered promiscuous mode [ 58.259281][ T3612] F2FS-fs (loop3): recover fsync data on readonly fs [ 58.300378][ T3612] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 58.330204][ T3612] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 58.446622][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.453967][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.484593][ T3682] device bridge0 left promiscuous mode [ 58.548319][ T3686] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.555506][ T3686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.562959][ T3686] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.570163][ T3686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.578932][ T3686] device bridge0 entered promiscuous mode [ 58.590811][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.033737][ T3702] device veth1_macvtap left promiscuous mode [ 59.217248][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.224739][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.305356][ T3721] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.312537][ T3721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.320017][ T3721] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.327198][ T3721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.370351][ T3721] device bridge0 entered promiscuous mode [ 59.997822][ T3756] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.032535][ T3754] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.039976][ T3754] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.119231][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.126388][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.133850][ T3761] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.141094][ T3761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.170192][ T3761] device bridge0 entered promiscuous mode [ 60.228514][ T1279] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.488579][ T1279] usb 3-1: Using ep0 maxpacket: 8 [ 60.596487][ T3730] loop0: detected capacity change from 0 to 40427 [ 60.638861][ T1279] usb 3-1: config 0 has too many interfaces: 38, using maximum allowed: 32 [ 60.653300][ T3730] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 60.677296][ T1279] usb 3-1: config 0 has an invalid interface number: 112 but max is 37 [ 60.698541][ T3730] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 60.720842][ T1279] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 38 [ 60.730614][ T1279] usb 3-1: config 0 has no interface number 0 [ 60.734140][ T3730] F2FS-fs (loop0): Found nat_bits in checkpoint [ 60.772522][ T3730] F2FS-fs (loop0): recover fsync data on readonly fs [ 60.780064][ T3730] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 60.787301][ T3730] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 60.808731][ T1279] usb 3-1: New USB device found, idVendor=12d1, idProduct=1404, bcdDevice=4b.1a [ 60.838271][ T1279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 60.849881][ T1279] usb 3-1: SerialNumber: syz [ 60.869961][ T1279] usb 3-1: config 0 descriptor?? [ 60.914186][ T1279] option 3-1:0.112: GSM modem (1-port) converter detected [ 60.998540][ T3510] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.029324][ T3783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.87'. [ 61.234895][ T1290] usb 3-1: USB disconnect, device number 2 [ 61.248845][ T3510] usb 2-1: Using ep0 maxpacket: 32 [ 61.261587][ T3791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 61.277642][ T1290] option 3-1:0.112: device disconnected [ 61.368585][ T3510] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 61.379240][ T3510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.396403][ T3510] usb 2-1: config 0 descriptor?? [ 61.408585][ T3558] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.446935][ T3510] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 61.600781][ T3798] netlink: 'syz.4.92': attribute type 4 has an invalid length. [ 61.620846][ T3798] device veth1_macvtap left promiscuous mode [ 61.645213][ T1066] usb 2-1: USB disconnect, device number 2 [ 61.651290][ T3558] usb 4-1: Using ep0 maxpacket: 32 [ 61.658966][ T144] usb 2-1: Failed to submit usb control message: -71 [ 61.668191][ T144] usb 2-1: unable to send the bmi data to the device: -71 [ 61.681649][ T144] usb 2-1: unable to get target info from device [ 61.701183][ T144] usb 2-1: could not get target info (-71) [ 61.708029][ T144] usb 2-1: could not probe fw (-71) [ 61.785526][ T3558] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.818515][ T3558] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.948848][ T3558] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 61.958165][ T3558] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 62.000830][ T3558] usb 4-1: Product: syz [ 62.005018][ T3558] usb 4-1: Manufacturer: syz [ 62.057803][ T3816] input: syz0 as /devices/virtual/input/input5 [ 62.110206][ T3558] hub 4-1:4.0: USB hub found [ 62.214260][ T26] audit: type=1800 audit(1719836749.923:2): pid=3823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file2" dev="sda1" ino=1961 res=0 errno=0 [ 62.320577][ T3825] nbd1: detected capacity change from 0 to 6 [ 62.328741][ T3558] hub 4-1:4.0: 2 ports detected [ 62.371155][ T3827] block nbd1: shutting down sockets [ 62.440328][ C1] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.451440][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 62.459674][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.471070][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 62.480044][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.491708][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 62.499949][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.510777][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 62.518937][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.529752][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 62.537782][ T3494] ldm_validate_partition_table(): Disk read failed. [ 62.544870][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.556016][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 62.564075][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.574956][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 62.585495][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.588942][ T264] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.606095][ T264] Buffer I/O error on dev nbd1, logical block 0, async page read [ 62.615810][ T264] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.626810][ T264] Buffer I/O error on dev nbd1, logical block 0, async page read [ 62.635611][ T3494] Dev nbd1: unable to read RDB block 0 [ 62.645864][ T264] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.657337][ T264] Buffer I/O error on dev nbd1, logical block 0, async page read [ 62.684896][ T3494] nbd1: unable to read partition table [ 62.723245][ T3494] nbd1: partition table beyond EOD, truncated [ 62.829896][ T3494] ldm_validate_partition_table(): Disk read failed. [ 62.863612][ T3494] Dev nbd1: unable to read RDB block 0 [ 62.888597][ T3558] hub 4-1:4.0: set hub depth failed [ 62.893046][ T3494] nbd1: unable to read partition table [ 62.918543][ T3494] nbd1: partition table beyond EOD, truncated [ 62.938952][ T3558] usb 4-1: USB disconnect, device number 2 [ 63.114265][ T3815] loop0: detected capacity change from 0 to 40427 [ 63.115042][ T3836] netlink: 6 bytes leftover after parsing attributes in process `syz.4.108'. [ 63.175508][ T3815] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 63.193803][ T3815] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.202802][ T3836] netlink: 6 bytes leftover after parsing attributes in process `syz.4.108'. [ 63.220250][ T3836] netlink: 6 bytes leftover after parsing attributes in process `syz.4.108'. [ 63.239849][ T3836] netlink: 6 bytes leftover after parsing attributes in process `syz.4.108'. [ 63.256164][ T3836] netlink: 6 bytes leftover after parsing attributes in process `syz.4.108'. [ 63.271202][ T3815] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.322128][ T3551] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 63.369982][ T3815] F2FS-fs (loop0): recover fsync data on readonly fs [ 63.389830][ T3815] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 63.407336][ T3815] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 63.588647][ T3551] usb 2-1: Using ep0 maxpacket: 32 [ 63.708711][ T3551] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 63.725080][ T3551] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 63.748116][ T3551] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 63.805653][ T3551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.836399][ T3551] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.864310][ T3551] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.904445][ T3551] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.962731][ T3551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.035538][ T3551] usb 2-1: config 0 descriptor?? [ 64.321120][ T1066] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.330508][ T3551] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 64.406295][ T3551] usb 2-1: USB disconnect, device number 3 [ 64.429713][ T3551] usblp0: removed [ 64.597250][ T1066] usb 5-1: Using ep0 maxpacket: 32 [ 64.719952][ T1066] usb 5-1: config index 0 descriptor too short (expected 26, got 18) [ 64.728100][ T1066] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 64.775843][ T1066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.792070][ T1066] usb 5-1: config 0 descriptor?? [ 64.843383][ T1066] as10x_usb: device has been detected [ 64.864325][ T1066] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 64.938452][ T3551] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 64.955309][ T1066] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 65.201859][ T1066] as10x_usb: error during firmware upload part1 [ 65.210904][ T1066] Registered device nBox DVB-T Dongle [ 65.213577][ T1066] usb 5-1: USB disconnect, device number 2 [ 65.268612][ T3551] usb 2-1: Using ep0 maxpacket: 32 [ 65.400290][ T3551] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 65.445995][ T3551] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 65.519649][ T3551] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 65.592837][ T3551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.639464][ T3551] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 65.676099][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.685550][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.698400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 65.707382][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 65.716354][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 65.725331][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 65.734304][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 65.743290][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 65.752259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 65.867508][ T1066] Unregistered device nBox DVB-T Dongle [ 65.870789][ T1066] as10x_usb: device has been disconnected [ 65.958482][ T3551] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 65.972151][ T3551] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 65.982168][ T3551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.044430][ T3507] Bluetooth: hci1: command 0x0405 tx timeout [ 66.070507][ T3551] usb 2-1: config 0 descriptor?? [ 66.077553][ T3877] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 1, id = 0 [ 66.121026][ T3551] usb 2-1: can't set config #0, error -71 [ 66.138593][ T3551] usb 2-1: USB disconnect, device number 4 [ 66.309856][ T3883] nbd4: detected capacity change from 0 to 6 [ 66.367162][ T3887] block nbd4: shutting down sockets [ 66.410845][ T3494] ldm_validate_partition_table(): Disk read failed. [ 66.425427][ T3494] Dev nbd4: unable to read RDB block 0 [ 66.441775][ T3494] nbd4: unable to read partition table [ 66.471804][ T3494] nbd4: partition table beyond EOD, truncated [ 66.514269][ T3494] ldm_validate_partition_table(): Disk read failed. [ 66.554538][ T3494] Dev nbd4: unable to read RDB block 0 [ 66.582044][ T3494] nbd4: unable to read partition table [ 66.593645][ T3494] nbd4: partition table beyond EOD, truncated [ 66.594257][ T3894] Zero length message leads to an empty skb [ 67.056827][ T3869] loop0: detected capacity change from 0 to 40427 [ 68.599151][ T3933] netlink: 6 bytes leftover after parsing attributes in process `syz.0.146'. [ 70.897556][ T1066] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 70.928733][ T1066] Bluetooth: hci2: Injecting HCI hardware error event [ 70.936965][ T3513] Bluetooth: hci2: hardware error 0x00 [ 70.970253][ T3986] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.232703][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.242151][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.233889][ T4083] loop4: detected capacity change from 0 to 2048 [ 73.347571][ T4083] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 73.418743][ T4083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.663941][ T4071] chnl_net:caif_netlink_parms(): no params data found [ 73.953384][ T4099] loop4: detected capacity change from 0 to 2048 [ 74.100319][ T4099] ======================================================= [ 74.100319][ T4099] WARNING: The mand mount option has been deprecated and [ 74.100319][ T4099] and is ignored by this kernel. Remove the mand [ 74.100319][ T4099] option from the mount to silence this warning. [ 74.100319][ T4099] ======================================================= [ 74.193633][ T4071] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.239292][ T4071] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.247573][ T4071] device bridge_slave_0 entered promiscuous mode [ 74.283022][ T4099] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.213: casefold flag without casefold feature [ 74.351283][ T4071] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.368759][ T4071] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.378913][ T4099] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 74.440938][ T4071] device bridge_slave_1 entered promiscuous mode [ 74.460322][ T4117] fuse: Bad value for 'fd' [ 74.478038][ T4099] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 74.533693][ T4099] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.642521][ T4071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.708918][ T4071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.753786][ T4122] loop1: detected capacity change from 0 to 128 [ 74.838498][ T3510] Bluetooth: hci5: command 0x0409 tx timeout [ 74.899574][ T4071] team0: Port device team_slave_0 added [ 74.906770][ T4071] team0: Port device team_slave_1 added [ 74.981006][ T4130] loop4: detected capacity change from 0 to 128 [ 75.000243][ T26] audit: type=1800 audit(1719836762.723:3): pid=4125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.222" name="bus" dev="loop1" ino=1048590 res=0 errno=0 [ 75.138189][ T4130] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 75.254739][ T4130] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 75.260036][ T4071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.335328][ T4071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.474002][ T4071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.584588][ T4071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.602234][ T4071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.722494][ T4071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.270567][ T4071] device hsr_slave_0 entered promiscuous mode [ 76.320949][ T4071] device hsr_slave_1 entered promiscuous mode [ 76.347655][ T4071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.360336][ T4071] Cannot create hsr debugfs directory [ 76.375576][ T4164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 76.780475][ T4176] device syzkaller0 entered promiscuous mode [ 76.853174][ T4185] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 76.882948][ T4185] bond0: (slave bond_slave_0): Releasing backup interface [ 76.908775][ T1066] Bluetooth: hci5: command 0x041b tx timeout [ 76.952510][ T4187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 77.171432][ T4197] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.280920][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 77.575177][ T4071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.664418][ T4219] team0: Device geneve1 is up. Set it down before adding it as a team port [ 77.691415][ T4221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.260'. [ 77.768815][ T4071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.915657][ T4071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.975918][ T4231] tipc: Started in network mode [ 77.981583][ T4231] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 78.010884][ T4231] tipc: Enabled bearer , priority 10 [ 78.030460][ T4071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.072876][ T4231] tipc: Cannot configure node identity twice [ 78.317304][ T4071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.383489][ T4247] syz.0.271 uses obsolete (PF_INET,SOCK_PACKET) [ 78.394774][ T4071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.420479][ T4071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.503440][ T4071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.530819][ T4256] netlink: 'syz.3.274': attribute type 2 has an invalid length. [ 78.933747][ T4270] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.996930][ T1066] Bluetooth: hci5: command 0x040f tx timeout [ 79.010115][ T4071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.113354][ T4270] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.138893][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.147051][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.150232][ T3558] tipc: Node number set to 10005162 [ 79.182088][ T4071] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.246614][ T4270] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.267728][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.277265][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.286228][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.293380][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.320065][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.329094][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.337884][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.345091][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.392824][ T4270] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.412814][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.423533][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.432735][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.449196][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.459650][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.468313][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.478170][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.487051][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.508124][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.517132][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.537857][ T4071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.567225][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.576465][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.585716][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.622054][ T4270] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.640253][ T4270] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.655250][ T4270] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.677799][ T4270] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.877450][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.894457][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.939082][ T4071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.070623][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.087513][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.165413][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.195404][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.273506][ T4071] device veth0_vlan entered promiscuous mode [ 80.289496][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.297514][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.343946][ T4322] device vlan0 entered promiscuous mode [ 80.415671][ T4071] device veth1_vlan entered promiscuous mode [ 80.521558][ T4339] loop1: detected capacity change from 0 to 512 [ 80.534521][ T4338] loop4: detected capacity change from 0 to 1024 [ 80.601097][ T4339] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.647932][ T4339] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 80.654891][ T4339] EXT4-fs (loop1): mount failed [ 80.670634][ T4338] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 80.882258][ T4339] loop1: detected capacity change from 0 to 256 [ 80.932078][ T4345] loop4: detected capacity change from 0 to 256 [ 80.985540][ T4339] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.083283][ T3512] Bluetooth: hci5: command 0x0419 tx timeout [ 81.237511][ T4347] loop4: detected capacity change from 0 to 512 [ 81.304828][ T4347] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 81.335588][ T4347] ext4 filesystem being mounted at /root/syzkaller.wyMKRP/71/file1 supports timestamps until 2038 (0x7fffffff) [ 81.490387][ T13] cfg80211: failed to load regulatory.db [ 81.853259][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.879903][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.907676][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.925771][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.946403][ T4071] device veth0_macvtap entered promiscuous mode [ 81.983906][ T26] audit: type=1804 audit(1719836769.703:4): pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.312" name="/root/syzkaller.avEvTa/70/bus" dev="sda1" ino=1974 res=1 errno=0 [ 82.041078][ T4071] device veth1_macvtap entered promiscuous mode [ 82.102803][ T4354] loop4: detected capacity change from 0 to 32768 [ 82.219076][ T4071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.258058][ T4071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.262391][ T4354] find_entry called with index = 0 [ 82.285720][ T4071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.297511][ T4354] read_mapping_page failed! [ 82.307801][ T4071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.318773][ T4354] ERROR: (device loop4): txCommit: [ 82.318773][ T4354] [ 82.339533][ T4071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.350031][ T4354] ERROR: (device loop4): diFree: numfree > numinos [ 82.350031][ T4354] [ 82.385146][ T4071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.404476][ T4071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.417630][ T4071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.435979][ T4071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.448992][ T4071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.466955][ T4071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.483199][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.500464][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.517250][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.547782][ T4071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.562990][ T4071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.580402][ T4071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.618404][ T4071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.628249][ T4071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.646987][ T4071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.657474][ T4071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.679915][ T4071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.698432][ T4071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.716603][ T4071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.736662][ T4071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.754306][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.782766][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.844666][ T4358] loop0: detected capacity change from 0 to 32768 [ 82.849326][ T4071] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.875514][ T4071] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.905781][ T4071] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.915258][ T4071] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.937047][ T4360] loop1: detected capacity change from 0 to 32768 [ 82.971634][ T9] device hsr_slave_0 left promiscuous mode [ 83.029041][ T9] device hsr_slave_1 left promiscuous mode [ 83.049841][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.060388][ T4360] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.315 (4360) [ 83.077043][ T4358] XFS (loop0): Mounting V5 Filesystem [ 83.114235][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.141030][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.148654][ T23] Bluetooth: hci5: command 0x0411 tx timeout [ 83.178670][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.190453][ T4360] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 83.229591][ T9] device bridge_slave_1 left promiscuous mode [ 83.240773][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.249828][ T4360] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 83.297176][ T4360] BTRFS info (device loop1): trying to use backup root at mount time [ 83.315563][ T9] device bridge_slave_0 left promiscuous mode [ 83.329789][ T4360] BTRFS info (device loop1): setting nodatasum [ 83.336316][ T4358] XFS (loop0): Ending clean mount [ 83.336685][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.357588][ T4360] BTRFS info (device loop1): force zlib compression, level 3 [ 83.365194][ T4358] XFS (loop0): Quotacheck needed: Please wait. [ 83.365396][ T4360] BTRFS info (device loop1): turning on flush-on-commit [ 83.409852][ T4360] BTRFS info (device loop1): enabling disk space caching [ 83.417124][ T4360] BTRFS error (device loop1): cannot disable free space tree [ 83.434046][ T9] device veth0_macvtap left promiscuous mode [ 83.441679][ T9] device veth1_vlan left promiscuous mode [ 83.458236][ T9] device veth0_vlan left promiscuous mode [ 83.499552][ T4358] XFS (loop0): Quotacheck: Done. [ 83.508972][ T4360] BTRFS error (device loop1): open_ctree failed [ 83.740854][ T3503] XFS (loop0): Unmounting Filesystem [ 83.886395][ T4360] loop1: detected capacity change from 0 to 1024 [ 84.052539][ T4203] hfsplus: b-tree write err: -5, ino 4 [ 84.157255][ T4383] loop1: detected capacity change from 0 to 64 [ 84.306901][ T9] team0 (unregistering): Port device team_slave_1 removed [ 84.354978][ T9] team0 (unregistering): Port device team_slave_0 removed [ 84.380283][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.384866][ T26] audit: type=1800 audit(1719836772.103:5): pid=4386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.320" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 84.447826][ T26] audit: type=1804 audit(1719836772.153:6): pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.320" name="/root/syzkaller.hHOJhp/73/bus/bus" dev="sda1" ino=1972 res=1 errno=0 [ 84.471795][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.562684][ T4388] loop1: detected capacity change from 0 to 4096 [ 84.687457][ T4390] loop0: detected capacity change from 0 to 1024 [ 84.753452][ T9] bond0 (unregistering): Released all slaves [ 85.033616][ T2613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.095962][ T2613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.147515][ T4165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.153229][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.183670][ T4165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.197078][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.041549][ T4394] loop1: detected capacity change from 0 to 32768 [ 86.101741][ T4395] loop0: detected capacity change from 0 to 32768 [ 86.152729][ T4395] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.326 (4395) [ 86.220465][ T4394] find_entry called with index = 0 [ 86.225839][ T4394] read_mapping_page failed! [ 86.253638][ T4394] ERROR: (device loop1): txCommit: [ 86.253638][ T4394] [ 86.266171][ T4394] ERROR: (device loop1): diFree: numfree > numinos [ 86.266171][ T4394] [ 86.288779][ T4395] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 86.297674][ T4395] BTRFS info (device loop0): enabling auto defrag [ 86.328111][ T4427] process 'syz.2.337' launched './file0' with NULL argv: empty string added [ 86.351202][ T4395] BTRFS info (device loop0): max_inline at 0 [ 86.367721][ T4395] BTRFS info (device loop0): enabling ssd optimizations [ 86.396172][ T4395] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 86.448568][ T4395] BTRFS info (device loop0): use lzo compression, level 0 [ 86.479027][ T4395] BTRFS info (device loop0): using free space tree [ 86.485577][ T4395] BTRFS info (device loop0): has skinny extents [ 88.827155][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 93.219649][ T4633] chnl_net:caif_netlink_parms(): no params data found [ 93.422768][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.464111][ T4633] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.473235][ T4633] device bridge_slave_0 entered promiscuous mode [ 93.482005][ T4633] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.489355][ T4633] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.497603][ T4633] device bridge_slave_1 entered promiscuous mode [ 93.529500][ T4633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.546145][ T4633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.726468][ T4633] team0: Port device team_slave_0 added [ 93.751595][ T4633] team0: Port device team_slave_1 added [ 93.796390][ T4633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.808406][ T4633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.866516][ T4633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.897178][ T4633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.904488][ T4633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.986496][ T4633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.098933][ T4633] device hsr_slave_0 entered promiscuous mode [ 94.149756][ T4633] device hsr_slave_1 entered promiscuous mode [ 94.434731][ T4633] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.568587][ T4633] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.696557][ T4633] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.810248][ T4633] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.919359][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 95.037492][ T4633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.076075][ T4633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.105507][ T4633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.137765][ T4633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.344240][ T4633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.375747][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.385674][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.441222][ T4633] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.482168][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.499755][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.515365][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.522607][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.597627][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.609843][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.646001][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.666175][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.673364][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.715729][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.736670][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.809527][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.820113][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.867902][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.877728][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.899432][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.908064][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.952670][ T4633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.986229][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.997299][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.009393][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.038523][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.309141][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.316808][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.344400][ T4633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.564294][ T26] audit: type=1800 audit(1719836784.283:7): pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.429" name="file0" dev="sda1" ino=1969 res=0 errno=0 [ 96.885877][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.909644][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.986622][ T4633] device veth0_vlan entered promiscuous mode [ 96.999653][ T3551] Bluetooth: hci1: command 0x041b tx timeout [ 97.064449][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.083656][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.183736][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.200276][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.243051][ T4633] device veth1_vlan entered promiscuous mode [ 97.279096][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.320511][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.421430][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.438023][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.474524][ T4633] device veth0_macvtap entered promiscuous mode [ 97.518709][ T4633] device veth1_macvtap entered promiscuous mode [ 97.609952][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.660673][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.700438][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.743059][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.784134][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.798270][ T4461] syz.2.342 (4461) used greatest stack depth: 18624 bytes left [ 97.838532][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.866024][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.886243][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.907394][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.929791][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.950596][ T4633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.986805][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.004116][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.017803][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.039464][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.060225][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.082042][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.100415][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.128436][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.157784][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.178841][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.225226][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.236209][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.277206][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.305121][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.334093][ T4633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.363567][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.380968][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.419794][ T4633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.445941][ T4633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.463278][ T4633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.478574][ T4633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.508251][ T4722] chnl_net:caif_netlink_parms(): no params data found [ 98.892184][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.918878][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.957303][ T4722] device bridge_slave_0 entered promiscuous mode [ 98.990028][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.997125][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.005088][ T3512] Bluetooth: hci6: command 0x0409 tx timeout [ 99.076924][ T3512] Bluetooth: hci1: command 0x040f tx timeout [ 99.083322][ T4722] device bridge_slave_1 entered promiscuous mode [ 99.143774][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.172251][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.210254][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.232500][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.283438][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.330861][ T4165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.352665][ T4165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.392927][ T4722] team0: Port device team_slave_0 added [ 99.412479][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.444466][ T4722] team0: Port device team_slave_1 added [ 99.587047][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.599658][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.698851][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.740798][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.776307][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.879395][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.035334][ T4722] device hsr_slave_0 entered promiscuous mode [ 100.079372][ T4722] device hsr_slave_1 entered promiscuous mode [ 100.103304][ T4722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.138493][ T4722] Cannot create hsr debugfs directory [ 100.542012][ T4722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.668651][ T4722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.863276][ T4722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.925989][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 101.001581][ T4722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.066703][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 101.088033][ T4472] Bluetooth: hci6: command 0x041b tx timeout [ 101.149630][ T4472] Bluetooth: hci1: command 0x0419 tx timeout [ 101.302801][ T4722] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.345126][ T4722] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.376393][ T4722] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.403267][ T4722] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.648814][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.693406][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.705359][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.743516][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.771256][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.789661][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.798209][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.805380][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.889101][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.897288][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.919277][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.957939][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.965118][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.994537][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.023123][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.064247][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.080343][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.100007][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.119221][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.129367][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.167263][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.181311][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.237320][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.261936][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.289794][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.299875][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.526721][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.537678][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.575313][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.623446][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.638785][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.709891][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.718340][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.740541][ T4722] device veth0_vlan entered promiscuous mode [ 102.775578][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.785460][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.815945][ T4722] device veth1_vlan entered promiscuous mode [ 102.856085][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.867058][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.885482][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.895672][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.907470][ T4722] device veth0_macvtap entered promiscuous mode [ 102.933780][ T4722] device veth1_macvtap entered promiscuous mode [ 102.976015][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.996410][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.007946][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.027712][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.037996][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.058665][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.077205][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.097438][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.107685][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.127070][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.137293][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.149356][ T7] Bluetooth: hci6: command 0x040f tx timeout [ 103.159885][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.180128][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.190309][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.206244][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.215424][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.233345][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.254174][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.270535][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.281321][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.292205][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.302854][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.314968][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.325234][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.336107][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.346310][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.357165][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.376594][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.388132][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.420526][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.438799][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.447840][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.471148][ T4722] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.496126][ T4722] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.508054][ T4722] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.525697][ T4722] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.784557][ T4203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.806382][ T4203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.875523][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.930352][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.954244][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.963303][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 103.986379][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.799471][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 105.229899][ T7] Bluetooth: hci6: command 0x0419 tx timeout [ 105.627771][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 111.311107][ T5022] loop2: detected capacity change from 0 to 256 [ 111.403274][ T5022] FAT-fs (loop2): Directory bread(block 1285) failed [ 111.446473][ T5022] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 111.636917][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 111.946621][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 112.059837][ T3512] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.450963][ T3512] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 112.471088][ T3512] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 112.498428][ T3512] usb 2-1: config 1 has no interface number 1 [ 112.508682][ T3512] usb 2-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 112.529198][ T5049] loop2: detected capacity change from 0 to 2048 [ 112.555906][ T3512] usb 2-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 112.588560][ T3512] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.601837][ T5049] UDF-fs: bad mount option "dmode=00000000p00000000000001" or missing value [ 112.705996][ T5049] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 112.841716][ T3512] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.841783][ T3512] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.841807][ T3512] usb 2-1: Product: syz [ 112.841824][ T3512] usb 2-1: Manufacturer: syz [ 112.841841][ T3512] usb 2-1: SerialNumber: syz [ 113.069788][ T5057] loop2: detected capacity change from 0 to 512 [ 113.138564][ T5057] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.158841][ T3512] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 113.220860][ T3512] hub 2-1:1.3: bad descriptor, ignoring hub [ 113.226807][ T3512] hub: probe of 2-1:1.3 failed with error -5 [ 113.244283][ T5057] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.551: iget: bad i_size value: -6917529027641081756 [ 113.272600][ T5063] netlink: 80 bytes leftover after parsing attributes in process `syz.0.552'. [ 113.294668][ T5057] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.551: couldn't read orphan inode 17 (err -117) [ 113.307490][ T5063] netlink: 80 bytes leftover after parsing attributes in process `syz.0.552'. [ 113.313063][ T5057] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.339325][ T3512] usb 2-1: USB disconnect, device number 5 [ 113.457226][ T3494] udevd[3494]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.801959][ T5079] loop0: detected capacity change from 0 to 1024 [ 113.865259][ T5079] EXT4-fs (loop0): Ignoring removed nobh option [ 113.878965][ T5079] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.959425][ T5079] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,dioread_nolock,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 114.004299][ T5088] loop2: detected capacity change from 0 to 128 [ 114.034075][ T5079] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.066766][ T5088] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 114.129292][ T5088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.321333][ T5091] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.558' sets config #0 [ 114.407916][ T5096] loop2: detected capacity change from 0 to 1024 [ 114.554230][ T5102] loop0: detected capacity change from 0 to 512 [ 114.678705][ T5102] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 114.807133][ T5102] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nombcache,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 114.906339][ T5112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.570'. [ 114.924630][ T5102] ext4 filesystem being mounted at /root/syzkaller.hHOJhp/120/file0 supports timestamps until 2038 (0x7fffffff) [ 114.951196][ T5102] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 114.968882][ T5102] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 114.998619][ T5102] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.565: Failed to acquire dquot type 0 [ 117.578347][ C0] sched: RT throttling activated [ 121.008554][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.418903][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 121.454745][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.492776][ T5198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'. [ 121.504399][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.528058][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 121.628993][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 121.648172][ T7] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 121.665132][ T7] usb 2-1: Manufacturer: syz [ 121.701985][ T7] usb 2-1: config 0 descriptor?? [ 121.824511][ T5204] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 121.970136][ T5202] kvm: pic: non byte write [ 122.194372][ T7] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 122.237262][ T7] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 122.380180][ T7] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 122.723596][ T5222] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 122.793481][ T5224] kvm: pic: non byte write [ 123.123716][ T3517] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 123.631809][ T5235] syz.0.609 (5235): attempted to duplicate a private mapping with mremap. This is not supported. [ 124.072971][ T26] audit: type=1804 audit(1719836811.793:8): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.615" name="/root/syzkaller.hHOJhp/134/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 [ 124.117302][ T5252] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 124.217054][ T5245] kvm: pic: non byte write [ 124.467406][ T23] usb 2-1: USB disconnect, device number 6 [ 124.750495][ T5265] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 124.822392][ T5265] kvm: pic: non byte write [ 124.868331][ C0] hrtimer: interrupt took 47219 ns [ 127.338702][ T5299] netlink: 'syz.2.634': attribute type 10 has an invalid length. [ 127.351946][ T5299] bond0: (slave bond_slave_0): Releasing backup interface [ 127.724032][ T5316] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 127.801177][ T5316] kvm: pic: non byte write [ 128.736366][ T5331] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 128.797843][ T5331] kvm: pic: non byte write [ 128.818097][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 130.294057][ T26] audit: type=1800 audit(1719836818.013:9): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.655" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 131.474023][ T5358] chnl_net:caif_netlink_parms(): no params data found [ 131.702112][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.713886][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.722940][ T5358] device bridge_slave_0 entered promiscuous mode [ 131.738037][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.750782][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.761327][ T5358] device bridge_slave_1 entered promiscuous mode [ 131.819267][ T5358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.835979][ T5358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.896682][ T5358] team0: Port device team_slave_0 added [ 131.908044][ T5358] team0: Port device team_slave_1 added [ 131.966306][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.989265][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.034071][ T5358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.050651][ T5393] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 132.065157][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.080751][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.126687][ T5358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.151271][ T5393] kvm: pic: non byte write [ 132.366267][ T5358] device hsr_slave_0 entered promiscuous mode [ 132.396876][ T5358] device hsr_slave_1 entered promiscuous mode [ 132.428763][ T7] Bluetooth: hci7: command 0x0409 tx timeout [ 132.459072][ T5358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.529526][ T5358] Cannot create hsr debugfs directory [ 132.672390][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.680837][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.985088][ T26] audit: type=1800 audit(1719836820.703:10): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.669" name="bus" dev="sda1" ino=1987 res=0 errno=0 [ 133.937226][ T5358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.280023][ T5358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.095167][ T3552] Bluetooth: hci7: command 0x041b tx timeout [ 135.179693][ T5358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.301967][ T5358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.316660][ T26] audit: type=1800 audit(1719836823.043:11): pid=5432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.679" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 135.408015][ T5438] BUG: sleeping function called from invalid context at net/core/sock.c:3282 [ 135.418911][ T5438] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5438, name: syz.0.680 [ 135.427882][ T5438] 7 locks held by syz.0.680/5438: [ 135.433560][ T5438] #0: ffffffff8d9f2088 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 135.443098][ T5438] #1: ffffffff8d9f1ee8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0xb8/0x400 [ 135.453484][ T5438] #2: ffff888065824690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: netlink_dump+0xd0/0xc40 [ 135.463511][ T5438] #3: ffffffff8dace968 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x191/0x3a0 [ 135.473932][ T5438] #4: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 135.483375][ T5438] #5: ffffc900018ce290 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x869/0x1330 [ 135.493510][ T5438] #6: ffff888061608120 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf6a/0x1cb0 [ 135.503628][ T5438] Preemption disabled at: [ 135.503645][ T5438] [<0000000000000000>] 0x0 [ 135.512496][ T5438] CPU: 0 PID: 5438 Comm: syz.0.680 Not tainted 5.15.161-syzkaller #0 [ 135.520583][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 135.530655][ T5438] Call Trace: [ 135.533931][ T5438] [ 135.536862][ T5438] dump_stack_lvl+0x1e3/0x2d0 [ 135.541560][ T5438] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 135.547211][ T5438] ? panic+0x860/0x860 [ 135.551293][ T5438] ___might_sleep+0x547/0x6a0 [ 135.555975][ T5438] ? __might_sleep+0xc0/0xc0 [ 135.560569][ T5438] ? memcpy+0x3c/0x60 [ 135.564557][ T5438] ? nla_put+0x12d/0x1e0 [ 135.568807][ T5438] ? skb_put+0x110/0x1f0 [ 135.573054][ T5438] ? nla_put+0x12d/0x1e0 [ 135.577295][ T5438] ? memcpy+0x3c/0x60 [ 135.581282][ T5438] __lock_sock_fast+0x2f/0xe0 [ 135.585968][ T5438] mptcp_diag_get_info+0x282/0xa10 [ 135.591091][ T5438] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 135.596289][ T5438] ? mptcp_diag_dump_one+0x280/0x280 [ 135.601577][ T5438] ? memset+0x1f/0x40 [ 135.605559][ T5438] ? nla_reserve_64bit+0x121/0x1c0 [ 135.610673][ T5438] inet_sk_diag_fill+0xf6a/0x1cb0 [ 135.615716][ T5438] ? inet_diag_msg_attrs_fill+0x9c0/0x9c0 [ 135.621437][ T5438] ? __might_sleep+0xc0/0xc0 [ 135.626032][ T5438] ? inet_diag_bc_sk+0x19d/0x10d0 [ 135.631052][ T5438] ? __rwlock_init+0x140/0x140 [ 135.635826][ T5438] ? do_raw_spin_unlock+0x137/0x8b0 [ 135.641027][ T5438] mptcp_diag_dump+0xd1d/0x1330 [ 135.645893][ T5438] ? __netlink_dump_start+0x52f/0x6f0 [ 135.651269][ T5438] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 135.657880][ T5438] __inet_diag_dump+0x20e/0x3a0 [ 135.662736][ T5438] inet_diag_dump_compat+0x1bd/0x2d0 [ 135.668037][ T5438] ? inet_diag_dump_start_compat+0x20/0x20 [ 135.673979][ T5438] ? __alloc_skb+0x397/0x590 [ 135.678587][ T5438] netlink_dump+0x605/0xc40 [ 135.683136][ T5438] ? netlink_lookup+0x1d0/0x1d0 [ 135.687992][ T5438] ? __inet_diag_dump_start+0x8a/0x990 [ 135.693461][ T5438] ? __inet_diag_dump_start+0x831/0x990 [ 135.699026][ T5438] __netlink_dump_start+0x52f/0x6f0 [ 135.704241][ T5438] inet_diag_rcv_msg_compat+0x202/0x4c0 [ 135.709791][ T5438] ? inet_diag_unregister+0xb0/0xb0 [ 135.714990][ T5438] ? read_lock_is_recursive+0x10/0x10 [ 135.720358][ T5438] ? sock_diag_rcv_msg+0xb8/0x400 [ 135.725383][ T5438] ? __mutex_trylock_common+0x17e/0x2e0 [ 135.731072][ T5438] ? mutex_lock_io_nested+0x60/0x60 [ 135.736286][ T5438] ? __inet_diag_dump+0x3a0/0x3a0 [ 135.741330][ T5438] ? inet_diag_dump_start_compat+0x20/0x20 [ 135.747137][ T5438] ? inet_diag_dump+0x50/0x50 [ 135.751849][ T5438] ? rcu_lock_release+0x20/0x20 [ 135.756704][ T5438] ? __copy_skb_header+0x47b/0x600 [ 135.761833][ T5438] ? dev_queue_xmit+0x20/0x20 [ 135.766523][ T5438] ? inet_diag_unregister+0xb0/0xb0 [ 135.771720][ T5438] sock_diag_rcv_msg+0xd5/0x400 [ 135.776580][ T5438] netlink_rcv_skb+0x1cf/0x410 [ 135.781345][ T5438] ? sock_diag_bind+0xa0/0xa0 [ 135.786024][ T5438] ? netlink_ack+0xb10/0xb10 [ 135.790626][ T5438] sock_diag_rcv+0x26/0x40 [ 135.795037][ T5438] netlink_unicast+0x7b6/0x980 [ 135.799808][ T5438] ? netlink_detachskb+0x90/0x90 [ 135.804750][ T5438] ? __virt_addr_valid+0x39e/0x450 [ 135.809860][ T5438] ? 0xffffffff81000000 [ 135.814035][ T5438] ? __check_object_size+0x300/0x410 [ 135.819350][ T5438] ? bpf_lsm_netlink_send+0x5/0x10 [ 135.824550][ T5438] netlink_sendmsg+0xa30/0xd60 [ 135.829409][ T5438] ? netlink_getsockopt+0x5b0/0x5b0 [ 135.834603][ T5438] ? plist_check_list+0x20d/0x220 [ 135.839627][ T5438] ? aa_sock_msg_perm+0x91/0x150 [ 135.844575][ T5438] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 135.849854][ T5438] ? security_socket_sendmsg+0x7d/0xa0 [ 135.855306][ T5438] ? netlink_getsockopt+0x5b0/0x5b0 [ 135.860503][ T5438] ____sys_sendmsg+0x59e/0x8f0 [ 135.865267][ T5438] ? iovec_from_user+0x300/0x390 [ 135.870208][ T5438] ? __sys_sendmsg_sock+0x30/0x30 [ 135.875356][ T5438] ___sys_sendmsg+0x252/0x2e0 [ 135.880037][ T5438] ? __sys_sendmsg+0x260/0x260 [ 135.884851][ T5438] ? __fdget+0x191/0x220 [ 135.889088][ T5438] __se_sys_sendmsg+0x19a/0x260 [ 135.893940][ T5438] ? __x64_sys_sendmsg+0x80/0x80 [ 135.898899][ T5438] ? syscall_enter_from_user_mode+0x2e/0x240 [ 135.904879][ T5438] ? lockdep_hardirqs_on+0x94/0x130 [ 135.910249][ T5438] ? syscall_enter_from_user_mode+0x2e/0x240 [ 135.916231][ T5438] do_syscall_64+0x3b/0xb0 [ 135.920646][ T5438] ? clear_bhb_loop+0x15/0x70 [ 135.925322][ T5438] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.931222][ T5438] RIP: 0033:0x7f47c8787b99 [ 135.935632][ T5438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 135.955231][ T5438] RSP: 002b:00007f47c7208048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.964687][ T5438] RAX: ffffffffffffffda RBX: 00007f47c8915fa0 RCX: 00007f47c8787b99 [ 135.972654][ T5438] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 135.980620][ T5438] RBP: 00007f47c880877e R08: 0000000000000000 R09: 0000000000000000 [ 135.988588][ T5438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.996557][ T5438] R13: 000000000000004d R14: 00007f47c8915fa0 R15: 00007fff58b7c408 [ 136.004546][ T5438]